SecPath F1020防火墙DHCP配置问题

SecPath F1020防火墙DHCP配置后终端无法获取地址，麻烦大神帮忙看看哪里有问题？以下是配置信息：

 version 7.1.064, Feature 9345P242001

#

 sysname H3C

#

context Admin id 1

#

 irf mac-address persistent timer

 irf auto-update enable

 undo irf link-delay

 irf member 1 priority 1

#

 dhcp enable

 dhcp server forbidden-ip 172.16.255.1 172.16.255.254

#

 dns server 114.114.114.114

 dns server 8.8.8.8

#

 lldp global enable

#

 password-recovery enable

#

vlan 1

#              

dhcp server ip-pool GuideSecDHCPPool

 gateway-list 172.60.255.254

 network 172.16.0.0 mask 255.255.0.0

 dns-list 211.139.80.6 218.203.160.194

#

controller Cellular1/0/0

#

interface NULL0

#

interface Vlan-interface1

 ip address 172.16.255.254 255.255.255.0

 dhcp server apply ip-pool guidesecdhcppool

 dhcp client-detect

#

interface GigabitEthernet1/0/0

 port link-mode route

 ip address 192.168.0.1 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-mode route

#

interface GigabitEthernet1/0/2

 port link-mode route

#

interface GigabitEthernet1/0/3

 port link-mode route

 description GuideWan Interface

 bandwidth 100000000

 ip address 117.157.125.2 255.255.255.0

 dns server 218.203.160.194

 dns server 211.139.80.6

 nat outbound description GuideNat

 gateway 117.157.125.1

#

interface GigabitEthernet1/0/4

 port link-mode route

#

interface GigabitEthernet1/0/5

 port link-mode route

#

interface GigabitEthernet1/0/6

 port link-mode route

#

interface GigabitEthernet1/0/7

 port link-mode route

#              

interface GigabitEthernet1/0/8

 port link-mode route

#

interface GigabitEthernet1/0/9

 port link-mode route

#

interface GigabitEthernet1/0/10

 port link-mode route

#

interface GigabitEthernet1/0/11

 port link-mode route

#

interface GigabitEthernet1/0/12

 port link-mode route

#

interface GigabitEthernet1/0/13

 port link-mode route

#

interface GigabitEthernet1/0/16

 port link-mode route

#

interface GigabitEthernet1/0/17

 port link-mode route

#

interface GigabitEthernet1/0/18

 port link-mode route

#

interface GigabitEthernet1/0/19

 port link-mode route

#

interface GigabitEthernet1/0/20

 port link-mode route

#

interface GigabitEthernet1/0/21

 port link-mode route

#

interface GigabitEthernet1/0/22

 port link-mode route

#

interface GigabitEthernet1/0/23

 port link-mode route

#

interface GigabitEthernet1/0/14

 port link-mode bridge

#

interface GigabitEthernet1/0/15

 port link-mode bridge

#

security-zone name Local

#

security-zone name Trust

 import interface Vlan-interface1

 import interface GigabitEthernet1/0/14 vlan 1

 import interface GigabitEthernet1/0/15 vlan 1

#

security-zone name DMZ

#

security-zone name Untrust

 import interface GigabitEthernet1/0/2

 import interface GigabitEthernet1/0/3

#

security-zone name Management

 import interface GigabitEthernet1/0/0

#

 scheduler logfile size 16

#

line class aux

 user-role network-operator

#              

line class console

 authentication-mode scheme

 user-role network-admin

#

line class vty

 user-role network-operator

#

line aux 0

 user-role network-admin

#

line con 0

 user-role network-admin

#

line vty 0 63

 authentication-mode scheme

 user-role network-admin

#

 ip route-static 0.0.0.0 0 GigabitEthernet1/0/3 117.157.125.1

#

 ssh server enable

#

 arp ip-conflict log prompt

#              

eap-profile Vlan-interface1

#

domain system

#

 domain default enable system

#

role name level-0

 description Predefined level-0 role

#

role name level-1

 description Predefined level-1 role

#

role name level-2

 description Predefined level-2 role

#

role name level-3

 description Predefined level-3 role

#

role name level-4

 description Predefined level-4 role

#

role name level-5

 description Predefined level-5 role

#

role name level-6

 description Predefined level-6 role

#

role name level-7

 description Predefined level-7 role

#

role name level-8

 description Predefined level-8 role

#

role name level-9

 description Predefined level-9 role

#

role name level-10

 description Predefined level-10 role

#

role name level-11

 description Predefined level-11 role

#

role name level-12

 description Predefined level-12 role

#

role name level-13

 description Predefined level-13 role

#

role name level-14

 description Predefined level-14 role

#

user-group system

#

local-user admin class manage

 password hash $h$6$bMxYAwbbEJgqQImG$brM+JBPYDglLH/ztLUsIkeDmd5dxbWM/b6yTvyNrk4nUKt5S1rOaaqtCGzbu0jnBai5a6xiDD3WyfqluAJpJOQ==

 service-type ssh telnet terminal http https

 authorization-attribute user-role level-3

 authorization-attribute user-role network-admin

 authorization-attribute user-role network-operator

#

 session statistics enable

#

 ipsec logging negotiation enable

#

 ike logging negotiation enable

#

 ip http enable

 ip https enable

#              

app-profile 1_IPv4

 ips apply policy guideipspolicy mode protect

#

 loadbalance isp file flash:/lbispinfo_v1.5.tp

#

traffic-policy 

 rule 3 name GuideWANAccPolicy 

  action qos profile guidewanaccprofile 

  source-zone Trust 

  destination-zone DMZ 

  destination-zone Untrust 

  service ike 

  service ipsec-ah 

  service ipsec-esp 

  service l2tp 

  service nat-t-ipsec 

 rule 4 name GuideAVCPolicy 

  action qos profile guideavcprofile1 

  source-zone Trust 

  destination-zone DMZ 

  destination-zone Untrust 

 profile name guideavcprofile1

  bandwidth downstream guaranteed 70000000 

  bandwidth downstream maximum 70000000 

 profile name guidewanaccprofile

  bandwidth downstream guaranteed 30000000 

  bandwidth downstream maximum 30000000 

#

security-policy ip

 rule 1 name GuideSecPolicy

  action pass

  profile 1_IPv4

  source-zone Trust

  destination-zone Untrust

  destination-zone DMZ

#

ips policy guideipspolicy

 severity-level critical

 protect-target WebServer Any

 protect-target WebServer Other

 protect-target WebServer WebLogic

#

 cloud-management server domain opstunnel.seccloud.h3c.com

#

return